Vulnerable dependency lodash.trim

[kradical]

We recently got a dependabot alert about a vulnerability in lodash.trim. It hasn't been released in 7 years so I don't know if we should expect to see a new release? A better alternative might be to drop lodash.trim. I'll take a peak and see how reasonable that would be.

Edit: it seems like likely replacing trim ends up doing regular expression stuff in this repo, possibly exposing a similar regex dos type vulnerability. So maybe wait and see and upgrade.